Forum Discussion

DouweMeer's avatar
DouweMeer
Impactful Individual
9 months ago
Solved

Sharing semantic models through intermediary

I'm trying to work together with some guy who uses my data from my semantic model, build a report of it by live connection and then share it with others. I did gave him reshare abilities, but now eve...
Tips and Tricks
  • v-veshwara-msft's avatar
    v-veshwara-msft
    8 months ago

    Hi DouweMeer ,

    Thanks for the follow up.
    Assigning an AD group with read access may not prevent a user with reshare and build from granting additional permissions. If they choose to share and allow build, that direct permission might still apply alongside the group’s read access, since permissions are handled in an additive way.

     

    If you want to ensure only read access is propagated, the reshare permission would need to be restricted.

     

    Please reach out for further assistance.

    Thank you.

v-veshwara-msft's avatar
v-veshwara-msft
Community Support
8 months ago

Hi DouweMeer ,

Thanks for raising this.

The explanations provided from ibarrau and lbendlin cover the scenario accurately. Reshare inherently allows the recipient to pass on the same permissions, so restricting them to share only with read access is not supported. You would need to manage permissions directly or ensure the intermediary does not grant additional rights when sharing.

 

If you need further clarification on permission behaviours, feel free to reach out.

Thank you.